Skip to content

Conversation

@Ericbla
Copy link

@Ericbla Ericbla commented Dec 2, 2022

The kvspb project seems to have not accepted pull-requests since a long time, but creating this pull request from my own fork may provide some visibility on my fork for people looking for some new features or fixes.

mmguero and others added 18 commits April 20, 2020 14:54
This reverts commit bf64cf2, reversing
changes made to f022103.

This change isn't right -- it an LDAP setup when `group_attribute_is_dn
on` is enabled, which is what this section of code
(kvspb@bf64cf2#diff-c05c0daefb48996cbf510b81002b49bcR2230)
is conditionally targeting.  This original PR kvspb#199 changed the underlying
LDAP query (eg `user_val`) from looking up the user's DN as a group
attribute in LDAP (eg set via the `group_attribute` directive in nginx)
to looking up the _group's_ DN, which isn't right and won't work.

This PR reverts the previous change to make this work correctly again.

Fwiw, the originally-referenced issue kvspb#180 seems to be a completely
different issue, relating to escaping and parentheses.
…on) or chain (verify cert chain but not hostname/IP)
…l_handshake_handler with ssl_check_cert and ssl_ca_dir
- Add possibility to retrieve LDAP attributes during LDAP search
…ishement

- Replaces list of 'search_attribute XXX' parameter by 'search_attributes XXX [YYY [ ... ]]'
- Support additional/optional 'encoding' param for 'binddn_passwd'
  parameter
- Add clean_on_timeout parameter
- Improve debug traces when multiple connections are used
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants